Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/1-MEg0XAw5pVYz_fPmpp6Y1VAsmY.roa
File: 1-MEg0XAw5pVYz_fPmpp6Y1VAsmY.roa (raw, json)
Hash identifier: +zgnm4jzSLgxYSGkTEvtJIxphWArUy18/MkBB2r0Kyk=
Subject key identifier: F8:C1:20:D1:70:30:E6:95:58:CF:F7:CF:9A:9A:7A:63:55:40:B2:66
Certificate issuer: /CN=4c90bf56078074828256675949a0c23a251784b1
Certificate serial: 019F23685E79373C6E10901E6718203CF0D0
Authority key identifier: 4C:90:BF:56:07:80:74:82:82:56:67:59:49:A0:C2:3A:25:17:84:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/1-MEg0XAw5pVYz_fPmpp6Y1VAsmY.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202204
IP address blocks: 2.58.24.0/22 maxlen: 24
2.58.26.0/23 maxlen: 23
78.26.0.0/18 maxlen: 23
139.28.124.0/22 maxlen: 22
141.195.16.0/20 maxlen: 23
152.228.64.0/19 maxlen: 23
171.22.152.0/22 maxlen: 22
185.100.204.0/22 maxlen: 22
185.161.136.0/22 maxlen: 22
2a00:ea0::/29 maxlen: 48
2a00:ea0::/32 maxlen: 32
2a09:5c0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5e:79:37:3c:6e:10:90:1e:67:18:20:3c:f0:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c90bf56078074828256675949a0c23a251784b1
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f8c120d17030e69558cff7cf9a9a7a635540b266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:39:8a:38:9f:83:75:2a:bb:2e:e7:e7:26:ae:
f7:7d:ae:e5:d0:86:f9:7e:94:a0:14:38:37:e2:72:
dd:2d:c4:9a:6d:1c:41:11:80:e4:16:b6:d6:d2:5c:
5e:c4:ad:6e:8e:07:53:0b:cd:77:bf:a3:dd:2f:91:
8c:85:09:ed:b9:2b:0a:f3:de:95:69:c1:2a:62:f5:
89:87:3b:46:76:40:0e:c8:d3:fb:de:69:19:08:89:
8b:54:26:c2:61:13:ba:d9:87:70:bd:2f:7c:19:c1:
dc:ef:60:4e:d8:e2:2a:04:13:95:f0:9f:9c:d1:6e:
7c:dd:5b:f4:4b:1d:a2:09:0d:e9:5d:9a:05:05:2f:
10:53:85:4a:d6:36:52:3c:03:22:7e:9d:98:cb:b5:
49:06:4f:65:eb:65:93:19:4f:8b:c1:d6:61:7b:c9:
e4:fe:2e:d8:7d:e7:3d:77:01:89:49:a1:b7:64:6a:
9e:9f:22:ad:e8:9e:8f:1a:05:9a:fb:0d:1b:e6:98:
59:83:28:cf:5f:af:4a:bd:4b:34:51:86:0e:b4:07:
9f:4f:dd:3e:b9:d3:b6:ad:0e:7a:1f:cf:a3:81:9a:
7c:fc:13:3a:6f:46:3b:ff:2b:0e:de:3e:29:c2:e5:
53:57:95:04:94:1d:32:84:f9:0b:5a:14:c2:15:f4:
c2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:20:D1:70:30:E6:95:58:CF:F7:CF:9A:9A:7A:63:55:40:B2:66
X509v3 Authority Key Identifier:
keyid:4C:90:BF:56:07:80:74:82:82:56:67:59:49:A0:C2:3A:25:17:84:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJC_VgeAdIKCVmdZSaDCOiUXhLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/1-MEg0XAw5pVYz_fPmpp6Y1VAsmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/TJC_VgeAdIKCVmdZSaDCOiUXhLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.24.0/22
78.26.0.0/18
139.28.124.0/22
141.195.16.0/20
152.228.64.0/19
171.22.152.0/22
185.100.204.0/22
185.161.136.0/22
IPv6:
2a00:ea0::/29
2a09:5c0::/29
Signature Algorithm: sha256WithRSAEncryption
47:ad:f0:31:23:98:87:68:3b:7a:b3:34:80:d2:75:11:c3:e6:
85:2a:6d:ff:bc:31:aa:fd:3a:be:14:23:e6:fc:1a:fe:9e:a7:
d3:2f:5d:3a:93:d6:ca:a9:37:b0:c7:e4:23:69:e8:9f:6e:68:
bb:9f:e2:c5:b4:dd:08:23:ce:29:6e:6d:53:7a:0c:18:95:f2:
4b:cc:1f:0e:22:15:81:bb:57:e1:3d:87:58:bb:cb:26:27:60:
32:00:2f:db:b6:51:97:eb:6e:62:5d:50:a1:e4:1c:ed:f7:94:
29:a4:1b:e0:c8:c4:aa:4e:8c:19:5a:81:2e:61:07:f1:7a:29:
10:59:f2:56:4b:8c:1f:8a:a0:43:e2:e7:b8:58:b1:b4:2b:f0:
a1:4f:cf:0b:fd:2b:b2:88:76:23:06:0a:dc:03:dc:c1:f8:4e:
9a:23:b2:9b:b1:d6:69:7c:4a:c2:f5:76:6a:2a:cf:70:57:00:
8a:4f:ca:63:60:ae:73:99:a5:56:e0:8a:b1:9f:68:29:a0:5d:
33:e1:6c:0e:78:e8:92:77:e5:4c:8f:6f:17:2d:20:a1:36:41:
09:59:cf:8c:85:d7:aa:70:d9:1f:00:f3:4d:fd:d7:2f:66:e0:
6b:1e:e5:c9:da:1b:88:06:1b:56:56:f7:04:5b:a5:1b:53:f5:
80:f2:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:41 2026 by rpki-client